Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18-09-2024 09:31
General
-
Target
5668f651d72d5471b1b15f84410785867a0e83cb051757cbb8d9be3206428fb3.exe
-
Size
1.5MB
-
MD5
c7227097eba6497549e9d2a04a10a398
-
SHA1
3d64655c02c99d6f1729e3fc9e72320d16d01300
-
SHA256
5668f651d72d5471b1b15f84410785867a0e83cb051757cbb8d9be3206428fb3
-
SHA512
3ae6f47c93a2560a83406896105a4b1abf1775cfbac1456dcfe83e1056534490ea28caa773ee1e8137a1388f593f07bd1b55ce3762a9a677beeb7db0261abd49
-
SSDEEP
24576:tG5LeAqWh6eoGXn88NSXNpop+DfymWw9cs:tG55qWEre8Hyw9
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.211.143:80/iJFd
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5668f651d72d5471b1b15f84410785867a0e83cb051757cbb8d9be3206428fb3.exe"C:\Users\Admin\AppData\Local\Temp\5668f651d72d5471b1b15f84410785867a0e83cb051757cbb8d9be3206428fb3.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB